site2sms.com XSS vulnerability

Open Bug Bounty ID: OBB-60743 Description| Value ---|--- Affected Website:| site2sms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sophos Cyberoam add_guest_user Blind SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary SQL on vulnerable installations of Sophos Cyberoam. Authentication is not required to exploit this vulnerability. The specific flaw exists within the addguestuser opcode. The issue lies in the failure to properly sanitize the specifi...

Mail.ru: Unproper usage of Mobile Number that will lead to Information Disclosure

We know that our mobile number is connected to some subdomains of mail.ru like calendar, cloud and etc. I found out that using 1 Mobile Number can create or use it to MANY ACCOUNTS. This is what I did.. I have a main account in mail.ru Email: [email protected] with Mobile Number of: 639154219078...

Twitter SMS-Spoofing Bug Allows Attackers to Send Tweets From Users' Accounts, Edit Profiles

There is a bug in the way that Twitter handles a feature that enables users to post messages via SMS and the researcher who discovered the bug says that it allows anyone who knows a user’s mobile number to not only tweet from the user’s account but also modify information in the user’s profile. T...